VulnerabilityModified
CVE-2014-7812
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.
LOW 3.5EPSS 1.46%
Does this matter?
Lower severity and a low EPSS score (1.46%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML via the System Groups field.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 1.46% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- redhat/satellite · redhat/spacewalk · suse/manager
- Source
- secalert@redhat.com
References
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
- http://rhn.redhat.com/errata/RHSA-2015-0033.htmlVendor Advisory
- http://secunia.com/advisories/62183
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00020.html
- http://rhn.redhat.com/errata/RHSA-2015-0033.htmlVendor Advisory
- http://secunia.com/advisories/62183
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.